Security at
The 
Dollar Web

Your privacy and security are our top priorities. Here's how we protect your data.

Our Security Philosophy

At The Dollar Web, we've built our entire platform around a simple principle: your documents are yours and yours alone. We don't want to see them, store them, or have access to them in any way. This isn't just a privacy policy statement. It's fundamental to how our tools work.

100% Browser-Based

All document processing happens entirely within your web browser. Your files never leave your device.

No Server Storage

Files you drop into our tools are never uploaded, stored, or retained on our servers. The only server-side storage anywhere is the optional, opt-in cloud backup of saved work on a few tools.

Open Source Libraries

We use well-established, transparent open-source tools that have been vetted by the security community.

How It Actually Works

The key to our security model is that all document processing happens in your browser using JavaScript. When you use a Dollar Web tool:

Your Files Stay Local

When you select a file to process (like a PDF to merge or an image to edit), that file is loaded into your browser's memory. The browser's JavaScript engine reads the file and performs whatever operations you've requested, merging PDFs, resizing images, generating QR codes, etc.

No Network Transmission

Your documents are never transmitted over the internet to our servers or anyone else's servers. The only network requests we make are to:

  • Load the web page itself and its resources (JavaScript libraries, stylesheets, and fonts, nearly all served from our own domain)
  • Download AI models to your device for the on-device AI tools. The model file comes down to you; your photo or audio never goes up
  • Authenticate your account and check subscription status (email and password only, never documents)
  • Send anonymous usage analytics (which tools get used, never document content)
  • An advertising conversion tag on marketing pages like this one. Tool pages do not carry it
  • If you are a Premium member and have explicitly turned on cloud backup for a supported tool, that tool's saved work syncs to your account (details below)

At no point do we request access to your actual document data.

Processing Happens in Your Browser

All the heavy lifting (PDF manipulation, image editing, file conversion) is done by your web browser's JavaScript engine on your own device. We provide the code that tells your browser how to do these operations, but we never see the input or output files.

Results Download Directly

When processing is complete, the result is offered as a download directly from your browser's memory. At no point does it pass through our servers.

What This Means for Your Privacy

We Can't See Your Documents

It's technically impossible for us to view your files since they never reach our servers. We genuinely have no access to your documents.

No Data Breaches Possible

Since we don't store your documents, they can't be stolen in a data breach. The only way to access your files would be to compromise your own device.

No Third-Party Access

We don't use analytics trackers that can see your documents. No third-party services have access to your files during processing.

What We Do Collect

While we don't collect or see your documents, we do use limited external services for essential platform functions:

Authentication & Account Management

We use Supabase for secure user authentication and account management. Supabase handles:

  • User registration and login
  • Password encryption and secure storage
  • Session management
  • Account tier verification (free vs. premium)

Supabase is an industry-standard authentication provider with enterprise-grade security. Your password is never stored in plain text; it is hashed with industry-standard algorithms.

Payment Processing

We use Stripe for all payment processing. Stripe is a PCI-DSS Level 1 certified payment processor. The highest level of security certification in the payments industry.

Important: The Dollar Web never sees or stores your payment information.

When you upgrade to Premium, you're redirected to Stripe's secure checkout page. Stripe handles all payment details, including credit card numbers, billing addresses, and transaction data. We only receive confirmation that a payment was successful. We never have access to your payment methods.

Usage Analytics

We collect usage data to improve our tools, including:

This data is aggregated and we can't tie it to specific documents or file contents in any way.

The One Exception: Optional Cloud Backup

A number of our creation tools (the Kanban Board, Online Notepad, Budget Planner, Resume Builder, Meal Planner, and others) offer Premium members an optional cloud backup so saved work follows you across devices. Being precise about how it works:

  • Off by default. Nothing syncs until you explicitly turn the toggle on and confirm a consent dialog that names exactly what will be stored
  • Only that tool's saved work. The backup holds the project you built inside the tool (your boards, notes, budget entries, resume content, and for a few design tools the images you added to that project). Files you process with converter-style tools are never part of any backup
  • Encrypted in transit and at rest. Backups travel over HTTPS (TLS) and are stored on infrastructure that encrypts all data at rest with AES-256
  • Isolated to your account. Every backup table is protected by database row-level security: your login session can only ever read or write your own rows, and write access is additionally verified against your subscription server-side, not just in the browser
  • Reversible, and deletable. Turn the toggle off and the tool goes back to storing work only on your device. When you turn it off, you can also choose Turn off & delete cloud copy, which removes your backup from our database entirely. Deleting always works, even if your subscription has lapsed

Worth restating in this context: the cloud backup is the only user content our database ever holds, it exists only for members who asked for it, and it is a small, deliberately limited slice of what the tools handle. The documents, photos, audio, and files you run through the tools themselves never touch a server at all, so they can never be part of any breach, ours or anyone's.

Separately, the QR Customizer offers Premium members opt-in trackable QR codes. When enabled, we store the destination link you chose and a timestamp for each scan so you can see scan counts. No information about the people who scan the code is stored beyond that timestamp.

Open Source Libraries

Our tools are built using trusted, open-source JavaScript libraries that are industry standards for browser-based document processing. These libraries include:

  • pdf-lib & PDF.js: PDF creation, manipulation, and rendering
  • jsPDF & html2pdf: Generating PDF downloads
  • ONNX Runtime Web: Runs our AI models (background removal, upscaling, face detection) as WebAssembly on your device
  • FFmpeg.wasm: Audio and video conversion compiled to WebAssembly
  • Tesseract.js: Optical character recognition (OCR)
  • Fabric.js: Canvas-based editing
  • JSZip: Creating ZIP archives
  • Mammoth: Reading Word documents
  • qrcode-generator & QRCode.js: QR code generation

Nearly all libraries are self-hosted on our own domain rather than pulled from third-party servers; the few exceptions load from trusted CDNs. The complete list of open-source components and their licenses is on our Licenses page.

Business Use & Compliance

The Dollar Web's architecture makes it suitable for business use, including handling sensitive documents:

Safe for Confidential Documents

Because documents are processed entirely in your browser and never transmitted to servers, you can safely use our tools for:

HTTPS Encryption

All connections to The Dollar Web are encrypted using HTTPS/TLS, protecting your authentication credentials and account information during transmission.

No Data Retention

Since we don't receive your documents, we have no documents to retain, delete, or manage. Your compliance obligations around data retention and destruction remain entirely under your control.

Note for Regulated Industries: While our architecture is designed for privacy and security, businesses in highly regulated industries (healthcare, finance, etc.) should evaluate whether our tools meet their specific compliance requirements. Our client-side processing model eliminates many data handling concerns, but you remain responsible for ensuring compliance with regulations applicable to your industry.

What Happens When You Use Our Tools

Here's a typical workflow to illustrate our security model:

Example: Merging PDFs

  1. You select files: You choose PDFs from your device using your browser's file picker
  2. Files load into browser memory: The files are read into your browser's JavaScript environment. They never leave your device
  3. Processing occurs locally: Our JavaScript code uses pdf-lib to merge the documents entirely within your browser
  4. You download the result: The merged PDF is created in your browser and offered as a download
  5. Memory is cleared: When you close the page, all document data is removed from browser memory

At no point in this process do your files touch our servers or leave your device.

Best Practices for Users

While we've built security into our architecture, here are some recommendations to maximize your security:

Questions About Security?

We take security seriously and are committed to transparency about how our platform works. If you have questions about our security practices or concerns about how your data is handled, please don't hesitate to reach out.

Contact us: info@thedollarweb.com

For more information about data collection and usage, please review our Privacy Policy.